Microsoft Edge Chromium vulnerabilities
290 known vulnerabilities affecting microsoft/edge_chromium.
Total CVEs
290
CISA KEV
9
actively exploited
Public exploits
10
Exploited in wild
9
Severity breakdown
CRITICAL14HIGH141MEDIUM127LOW8
Vulnerabilities
Page 5 of 15
CVE-2021-30610P3HIGHCVSS 8.8≤ 93.0.4577.632021-09-03
CVE-2021-30610 [HIGH] CWE-416 CVE-2021-30610: Chromium: CVE-2021-30610 Use after free in Extensions API
Chromium: CVE-2021-30610 Use after free in Extensions API
nvd
CVE-2021-30620P3HIGHCVSS 8.8≤ 93.0.4577.632021-09-03
CVE-2021-30620 [HIGH] CVE-2021-30620: Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink
Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink
nvd
CVE-2026-57975P3HIGHCVSS 7.5fixed in 150.0.4078.482026-07-03
CVE-2026-57975 [HIGH] CWE-843 CVE-2026-57975: Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) all
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-58292P3HIGHCVSS 7.5fixed in 150.0.4078.482026-07-03
CVE-2026-58292 [HIGH] CWE-20 CVE-2026-58292: Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to exec
Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-59251P3HIGHCVSS 7.6fixed in 140.0.3485.812025-09-24
CVE-2025-59251 [HIGH] CWE-121 CVE-2025-59251: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2022-33636P3HIGHCVSS 8.3fixed in 104.0.1293.472022-08-09
CVE-2022-33636 [HIGH] CWE-362 CVE-2022-33636: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2023-23374P3HIGHCVSS 8.3fixed in 110.0.1587.412023-02-14
CVE-2023-23374 [HIGH] CVE-2023-23374: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2023-21775P3HIGHCVSS 8.3fixed in 108.0.1462.95fixed in 109.0.1518.702023-01-24
CVE-2023-21775 [HIGH] CVE-2023-21775: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2026-66318P3HIGHCVSS 8.1fixed in 151.0.4129.592026-08-04
CVE-2026-66318 [HIGH] CWE-346 CVE-2026-66318: Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclo
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2021-30618P3HIGHCVSS 8.8≤ 93.0.4577.632021-09-03
CVE-2021-30618 [HIGH] CVE-2021-30618: Chromium: CVE-2021-30618 Inappropriate implementation in DevTools
Chromium: CVE-2021-30618 Inappropriate implementation in DevTools
nvd
CVE-2021-30613P3HIGHCVSS 8.8≤ 93.0.4577.632021-09-03
CVE-2021-30613 [HIGH] CWE-416 CVE-2021-30613: Chromium: CVE-2021-30613 Use after free in Base internals
Chromium: CVE-2021-30613 Use after free in Base internals
nvd
CVE-2021-30608P3HIGHCVSS 8.8≤ 93.0.4577.632021-09-03
CVE-2021-30608 [HIGH] CWE-416 CVE-2021-30608: Chromium: CVE-2021-30608 Use after free in Web Share
Chromium: CVE-2021-30608 Use after free in Web Share
nvd
CVE-2025-29815P3HIGHCVSS 7.6fixed in 134.0.3124.662025-04-04
CVE-2025-29815 [HIGH] CWE-416 CVE-2025-29815: Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
nvd
CVE-2026-88097P3HIGHCVSS 7.8fixed in 153.0.4234.462026-09-18
CVE-2026-88097 [HIGH] CWE-416 CVE-2026-88097: Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privile
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2026-58299P3HIGHCVSS 7.5fixed in 150.0.4078.482026-07-03
CVE-2026-58299 [HIGH] CWE-367 CVE-2026-58299: Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unauthoriz
Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-58290P3HIGHCVSS 7.5fixed in 150.0.4078.482026-07-03
CVE-2026-58290 [HIGH] CWE-843 CVE-2026-58290: Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) all
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2022-30192P3HIGHCVSS 8.3fixed in 103.0.5060.532022-06-29
CVE-2022-30192 [HIGH] CVE-2022-30192: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2022-33639P3HIGHCVSS 8.3fixed in 103.0.5060.532022-06-29
CVE-2022-33639 [HIGH] CVE-2022-33639: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2021-31982P3HIGHCVSS 8.8fixed in 91.0.864.372023-07-01
CVE-2021-31982 [HIGH] CWE-693 CVE-2021-31982: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
nvd
CVE-2022-33638P3HIGHCVSS 8.3fixed in 103.0.5060.532022-06-29
CVE-2022-33638 [HIGH] CVE-2022-33638: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd